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Sir: 

IN THE SPECIFICATION — 

Page 12, lines 12-15 delete "the CA signs the requesting 
entity's public key with a CA's private ky and places the 
signed public key within the digital certificate" and insert 
therefor -- the CA puts the requesting entity's public key 
into a certificate and signs the certificate with the CA's 
private key--. 

Page 14, lines 15-16 delete "digital certificate 216 
containing signed user public key 216 that was signed with 
CA private key 214" and insert therefor --digital 
certificate 216 containing user public key 218 and the 
certificate is signed with CA private key 214--. 
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Page 17, lines 2-3 delete "For example, one application may 
need a simple CA that is able to issue certificates and 
manage the life cycle of these certificates — and insert 
therefor --For example, one application may need a simple CA 
that is able to issue certificates and manage the life cycle 
of the certificates including revocation of certificates and 
generating certificate revocation lists--. 

Page 20, lines 2-7 delete "This LDAP publisher bean 370 
publishes any specific parameters associated with such a 
request to an LDAP directory structure 373. Again, this may 
take place as the request winds its way through the PKI 
request system 300 an initial time. Or the publishing of 
the request in the LDAP directory 373 may take place in the 
return path of the request after reaching the terminus bean" 
and insert theref or--This LDAP publisher bean 370 publishes 
certificates or certificate revocation lists. These 
certificates or certificate revocation lists are obtained in 
the return path of the requests after reaching the terminus 
bean-- . 
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